RE: [Openvpn-devel] openvpn - support PKCS#11 smartcards

2005-09-13 Thread C. Ruiz, Ivan
Hello, it works fine when you specify the "sign" method. If you leave it with the default (auto) OpenSC tricks your code to think that it supports SignRecover and it fails. OpenSC says that the private key supports SignRecover (CKA_SIGN_RECOVER) when you ask it (see function pkcs15_prkey_get_a

RE: [Openvpn-devel] openvpn - support PKCS#11 smartcards

2005-09-13 Thread Alon Bar-Lev
C. Ruiz, Ivan wrote: >The problem is clearly on OpenSC pkcs#11 implementation, but with the option --pkcs11-sign-mode > you have included we can workarround it! OK... So we can close this issue. > I agree to drop support for OpenSC. The PKCS#11 approach works well with OpenSC and it will > broad